CWE-705
11 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 11Published CVEs11 of them scored
- 8Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-120341
mathurvishal CloudClassroom-PHP-Project studentdetails.php redirect
mathurvishal · CloudClassroom-PHP-Project
Medium6.9 - CVE-2026-55537
PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114
MervinPraison · PraisonAI
High7.1 - CVE-2026-45819
baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate…
web-platform-dx · baseline-browser-mapping
Medium6.6 - CVE-2026-40208
Denial of service via DoH3 queries
PowerDNS · DNSdist
Low3.7 - CVE-2026-10271
a4m4 Student-Management-System Admin Endpoint admin redirect
a4m4 · Student-Management-System
Medium5.3 - CVE-2026-3449
Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignal option is used.…
@tootallnate/once
Medium4.8 - CVE-2026-3264
go2ismail Free-CRM Administrative redirect
go2ismail · Free-CRM
Medium5.3 - CVE-2026-3262
go2ismail Asp.Net-Core-Inventory-Order-Management-System Administrative redirect
go2ismail · Asp.Net-Core-Inventory-Order-Management-System
Medium5.3 - CVE-2025-53856
TMM vulnerability
F5 · BIG-IP
High8.7 - CVE-2024-45433
OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping. The specific flaw exists within the BlueSDK Bluetooth stack. The issue…
Product not named
Medium6.5